SAA-C03 Q315 · Security

Question

A company uses an Amazon CloudFront distribution to serve content pages for its website. The company needs to ensure that clients use a TLS certificate when accessing the company's website. The company wants to automate the creation and renewal of the TLS certificates. Which solution will meet these requirements with the MOST operational efficiency?

Accepted Answer

**Option C: Use AWS Certificate Manager (ACM) to create a certificate with DNS validation.**

Let's map each requirement to this solution:

1. **TLS certificate for CloudFront**: ACM is the native AWS service for provisioning, managing, and deploying SSL/TLS certificates. ACM certificates integrate seamlessly with CloudFront — you simply select the ACM certificate in the CloudFront distribution settings. Note: For CloudFront, the ACM certificate **must be created in us-east-1 (N. Virginia)**.

2. **Automate creation**: ACM handles the entire certificate creation process. You request a certificate, validate domain ownership, and ACM provisions it automatically.

3. **Automate renewal**: This is the critical differentiator. **DNS validation** means you add a CNAME record to your DNS configur

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips